floxif | fbb24dbc8d8c1fdcb9f7689a3b4ad665aa9af410457ba5e93d10a22ef0460989 | Triage

Sharing

General

Target

fbb24dbc8d8c1fdcb9f7689a3b4ad665aa9af410457ba5e93d10a22ef0460989
Size

165KB
Sample

250128-f6yweayqbq
MD5

f05bbb8b4c3eebcb821fd55a716dc222
SHA1

215e60a763b4a2a780f16f291d2ad19e53a1f6d3
SHA256

fbb24dbc8d8c1fdcb9f7689a3b4ad665aa9af410457ba5e93d10a22ef0460989
SHA512

a20a27b69ff0cc7e6b493400275faebdf05c8d2613a37c2e7fad2dc20588c7436bc79ce3c9a1aaa8adac2dab0baa5be399f68a0c6347e87789ba0e423f9e8bd5
SSDEEP

3072:oJ8IMILmCa3yx6oFEdgVXnF1P1duA9TSiMgSp:bkmCaiEoFEd+FhuAgiMV

Score

10^/10

floxif backdoor discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  fbb24dbc8d8c1fdcb9f7689a3b4ad665aa9af410457ba5e93d10a22ef0460989
- Size
  
  165KB
- MD5
  
  f05bbb8b4c3eebcb821fd55a716dc222
- SHA1
  
  215e60a763b4a2a780f16f291d2ad19e53a1f6d3
- SHA256
  
  fbb24dbc8d8c1fdcb9f7689a3b4ad665aa9af410457ba5e93d10a22ef0460989
- SHA512
  
  a20a27b69ff0cc7e6b493400275faebdf05c8d2613a37c2e7fad2dc20588c7436bc79ce3c9a1aaa8adac2dab0baa5be399f68a0c6347e87789ba0e423f9e8bd5
- SSDEEP
  
  3072:oJ8IMILmCa3yx6oFEdgVXnF1P1duA9TSiMgSp:bkmCaiEoFEd+FhuAgiMV
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2